You could probably make the argument that you need to store http logs with cleartext IP addresses for more than 30 days for operational security and fraud detec

You could probably make the argument that you need to store http logs with cleartext IP addresses for more than 30 days for operational security and fraud detection reasons. I would certainly consider 180+ days of cleartext IP addresses quite necessary to be able to react to any security or abuse incidents.